We did have a Cisco ASA a couple of years ago and used a client gui install from an Admin workstation. If there are no Cisco devices on the network, I assume it would be ok to remove users from the groups and deleting them after a couple of days? I guess leaving them wouldn't matter if they had no members.

Are there any users in these groups? If there are what you could do as a test is removed them from the group (see if they complain about access) if they do add them back to the group and don't delete it. If you don't hear anything for a week or so you can remove the group.

Featured Post

Administration of Active Directory does not have to be hard. Too often what should be a simple task is made more difficult than it needs to be.The solution? Hyena from SystemTools Software. With ease-of-use as well as powerful importing and bulk updating capabilities.